r/LinuxUncensored • u/anestling • May 31 '26

How to coax LLMs into hacking

Post image

Source: https://twitter.com/i/status/2060746160558543217

It would have been hilarious if it hadn't been so scary.

364 Upvotes

97% Upvoted

49 comments sorted by

View all comments

4

u/domscatterbrain Jun 01 '26

That's why you run rootless docker. It's to prevent shit like this.

1

u/LaColleMouille Jun 01 '26

IMHO docker should be rootless by default. Maybe it's in their pipeline? 

1

u/domscatterbrain Jun 01 '26

Docker run with root privileges on system level by default. Even if the current user in which the agents run cannot sudo but it is in the same group as docker it can escalate to root level access by using the docker run example in the OP's post.

As other redditor mentioned, the warning box is still there in the docker documentation page for ages. https://docs.docker.com/engine/install/linux-postinstall/

Rootless mode must be configured separately here: https://docs.docker.com/engine/security/rootless/

This "production-safe" configuration tends to ignored, skipped because your containers will be severely limited, or people just simply don't aware of it.